Sony PlayStation 3 Dumping Guide

From Redump Wiki

Jump to: navigation, search

PlayStation 3 dumping can be done in a few different ways. A PS3 console with custom firmware is the best setup to acquire because: A) the hardware is readily available at used shops and B) it allows you to dump disc keys.

Notes about dumping PS3 preproduction BD-R / DVD-R and PS3 kiosk discs:

  • Dump these with the Disc Dumping Guide (MPF) method.
  • Preproduction builds can be BD-R or DVD-R, and all have a common disc key of 67C0758CF4996FEF7E88F90CC6959D66
  • Kiosk demos can be CD-Rom, DVD-Rom, or BD-Rom. Some PS3 preproduction press builds that are NOT -R's (but standard PS3 Blu-Rays) will need to be dumped the same way as any retail PS3 game disc (example).


Contents

Dumping with a PS3 Console + Custom Firmware (CFW)

Buy a compatible PS3 Console model[1] (Early PS3 Slims and all PS3 Fats are compatible, newer PS3 slims and PS3 Super Slims are incompatible):

  • Fat (all Fat models manufactured are compatible):
    • CECH A01 NAND
    • CECH B NAND
    • CECH C NAND
    • CECH E NAND
    • CECH G NAND
    • CECH H NOR
    • CECH J NOR
    • CECH K NOR
    • CECH L NOR
    • CECH M NOR
    • CECH P NOR
    • CECH Q NOR
  • Slim:
    • CECH-20XX
    • CECH-21XX
    • CECH-25XX (less compatible, best to avoid)

Method 1: ManaGunZ

This is the simplest method, but if you have any issues/bugs, you might want to try Method 2 (MultiMAN).

Setup:

  • Install Evilnat CFW instructions here (use 3.56-4.89 CFW if possible). CFW is a strict requirement, HEN hacks don't provide enough access to dump metadata.
  • If you had to use 4.90 (or newer) CFW, install Rebug Toolbox (download) and enable the QA toggle to be able to downgrade to 4.89 (instructions here). This is because ManaGunZ (next step) isn't updated to 4.90
  • Download and install ManaGunZ nightly (installation process is a straightforward launch of a .pkg file off a USB thumbstick)

Dumping .iso and metadata:

  • Boot your PS3 and once you get to the CFW menu, then insert the disc you wish to dump
  • Launch ManaGunZ
  • Select the game to dump under PS3 section
  • Press Triangle to open Game Menu
  • Press Dump encrypted Blu-Ray disc
  • Press Generate GetKey dump to dump metadata ('disc.pic' and 'getkey.log' files will be created)
  • Transfer generated ISO and metadata files to PC with a method of your liking (FTP or USB stick)

Notes:

  • Be sure to enable logging (at the main ManaGunZ screen press Start button to enter Settings menu; under Global settings enable Show logs option). This way you will be able to see a detailed live report on read errors if application encounters any.
  • It's not neccesary to exit ManaGunZ after each dumping instance. The application will automatically update its state to accomodate for a new inserted disc.
  • If you want to create IRD file, then dump the disc via Dump decrypted Blu-Ray disc. IRD file will be created at the last stage of dumping process.
  • Video showcase of a dumping process using ManaGunZ

Method 2: MultiMAN

Setup:

  • Install the latest Rebug CFW instructions here (use 3.56 CFW or higher).
  • Download Rebug Toolbox.
  • Download MultiMAN (4.85.01).
  • GetKey r2.
  • If the PS3 is running a cobra CFW and up-to-date multiMAN, you have to select from the XMMB menu mmCM → 'Switch to multiMAN mode' to make the the option 'Enable Direct Disc Access' appear in the start menu. Otherwise, the ISO that you create will be incorrect (decrypted).

Dumping .iso:

  • In XMMB display mode, go to multiMAN → File Manager / mmOS.
  • In the Start Menu icon (look at the MultiMAN icon in the left botton of the screen and click it), select 'Enable Direct Disc Access'.
    • If this option doesn't show up, go back to the XMMB display mode, and go to multiMAN → Switch to multiMan Mode.
    • You will have to select 'Enable Direct Disc Access' for each dump. The system will not remember this option.
  • Double-click the Games icon to switch back to XMMB display mode. In the multiMAN column, select 'Refresh'.
  • Now go to the Video column. It should now show a BD/DVD entry. Go to it, and select the 'Create ISO' option.
  • You can now copy the ISO to your preferred destination. For the best speeds, select the internal HDD.
  • Once it is dumped, you can use File Manager to copy/paste the ISO from the PS3ISO folder to your USB drive.
  • If your destination is FAT, >4GB ISO's that are split into segments have to be joined using PS3 ISO Tools[2][3] or by using the 'copy /b' command on CMD.

Metadata Dumping:

  • Launch the Toolbox PKG app from the PS3 XMB. Once you are inside, move to the right over the options until the "Utilities" icon options displays. Then go down till you spot the following options:

1. "Dump eid root key (dump eid root key at dev_hdd0/game/RBGTLBOX2/USRDIR/eid_root_key)". Once you push it, the console will create a file called "eid_root_key" on the mentioned route. NOTE: the eid_root_key is console specific so can be reused.

Next, get a copy of the eid_root_key file:

  • Transfer to your computer via FTP: You can FTP into your console to copy the eid_root_key to your computer.
  • Transfer to your thumb drive via Console: Use MultiMAN File Manager or any tool to move inside the PS3 file system to get inside the RBGTLBOX2 folder. Make sure you have a USB drive connected to the PS3. Copy the Eid Root Key and paste it to the USB drive route (should be something like /dev_usb000).

2. "Export Flash to File (Backup your current NOR/NAND flash to /dev_usb000)". As soon as you enter the option, the system will ask you to "Please insert a USB drive (/dev_usb000) with at least 256mb free and try again!". Make sure you have a USB drive (format to Fat32 format - if your flash drive is bigger than 32gb you'll need to partition it) connected to the correct USB port (the right-most USB port). Try till you hit the correct port and the dumping process will start. NOTE: the NOR/NAND flash backup is console specific so can be reused.

  • If everything was done correctly, once you pop the USB into a computer you should have two files: "eid_root_key" and something like this "20181219-130200-FLASH-NOR-FW.81" (The FW numbers depends on your firmware, in my case, i did it with FW 4.81).
  • Fire up an Hex Editor app. We will use HxD for example.
  • Once HxD is launched, go to "Open" and search for your NOR/NAND dump file. Open it.
  • Once is loaded, hit CTRL+G and type in "303A0" if you're on NOR or "81BA0" if on NAND. (Note: If you didnt understand this, just write and search "303A0", when you start hex-editing the file, you are on NOR)
  • At the left column, you should see the Offsets are displayed and the one we were looking, 0x00303A0 (for NOR in this case), will be there. Copy the 0x30 bytes from that offset and paste them into a new file AKA mark the 0x00303A0, 0x00303B0 and 0x00303C0 lines from "00" to "0F" values and copy them (CTRL+C). Go to File → New and a clean sheet will open. Paste (CTRL+V) the content and keep it opened.

This would be a visual example of what are you looking for. Mind you only need to search and copy the NOR bytes or the NAND bytes, not both:

NOR: 0x00303A0 - 0x00303CF NAND: 0x0081BA0 - 0x0081BCF
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
000303A0  8B D7 1B A0 C3 DA 4B BE B3 72 AE 61 78 90 31 1F  ‹×. ÃÚK¾³r®ax.1.
000303B0  2E CD F1 92 28 8E 17 AD 6A 9C D5 8A 8E 17 86 39  .Íñ’(Ž.­.jœÕŠŽ.†9
000303C0  C8 0A F7 9B 92 D8 3A A8 92 60 73 6A 5E 12 2A 94  È.÷›’Ø:¨’`sj^.*”
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
   
00081BA0  40 9F 75 39 22 96 C2 12 A2 9C BC CF 53 99 73 40  @Ÿu9"–Â.¢œ¼ÏS™s@
00081BB0  5D AD A7 F6 26 6E 50 35 55 A8 8A B9 24 A1 F5 35  ]­.§ö&nP5U¨Š¹$¡õ5
00081BC0  BC 3B 7A 88 17 75 9C 44 A9 2D 4B E0 8B 80 92 E7  ¼;zˆ.uœD©-Kà‹€’ç
  • Now, go to "File" → "Open" and search the EID root key file. Once is opened, do CTRL+A to select all the content and copy it (CTRL+C). Go to the previous sheet we created (the one where we pasted NOR/NAND bytes) and just paste (CTRL+V), making the bytes from the eid root key appear under the NOR/NAND ones. Go to "File" → "Save" and rename this file as "3Dump.bin"
  • Take your "3Dump.bin" file and place it the USB drive.

Metadata Dumping: Using GetKey to get Disc Key, Disc ID, and PIC

  • Plug your USB drive (FAT32, with your 3Dump.bin on the root) into the right-most USB port (/dev_usb000/).
  • From the PS3 XMB → Game → GetKey (with the game disc inserted): it'll run and exit back to XMB.
  • It creates two files on the root of the USB drive: 'disc.pic' and 'getkey.log'.
  • The 'getkey.log' text file will contain the disc_key, disc_id, and PIC. If anything went wrong when you originally created your '3Dump.bin' or extracting the data, the "getkey.log" will contain a WARNING message saying the process failed.
  • Make sure to include the 'disc.pic' and 'getkey.log' when submitting your dumps.

Dumping with a PC and an external PS3/OEM Blu-Ray drive

Tools

Hardware

  • 3k3y Ripper Device [4].
  • Sony PS3 Blu-Ray drive with sector 2 zeroing[5].
  • Sony PS3 OEM Power Cable[6] (these sometimes come with PS3 OEM drives, but not always).
  • Power adapter. Search "UGREEN USB to IDE Converter, USB 3.0 to IDE" on Amazon - even though you don't need to convert IDE to anything, it's still a great power adapter for feeding power to your Blu-Ray drive.

Software

First Time Setup

  • Hardware: Your Blu-Ray drive should come with a ribbon, attach this to the 3k3y Ripper. The 3k3y Ripper should come with a USB cable, plug this in to the 3k3y Ripper and the other end into your computer. Feed your Blu-Ray drive power with the UGREEN power adapter AND plug the adapter's USB cable to the computer for additional power. Your computer should detect the drive.
  • Software: Install IsoTools app linked above. Unzip GetKeyFrom3k3y and DVDToImg, these two are command line apps.
  • Power on your drive and hook up the USB to your computer.
  • Make sure your Blu-Ray drive is empty, you can eject any discs with the tiny black button on top of the 3k3y Ripper.
  • Open IsoTools. You should get a warning telling you that if you press "Yes" you will no longer be able to use the drive with a PS3 console ("You've enabled the use of default keys..."). Chose "Yes". [NOTE: if you don't get this pop-up, go to Tools → Settings and uncheck and recheck "Use Default Keys", at this point you should get the pop-up.]
  • See also, 3K3Y setup video here[7].

Dumping

  • Open IsoTools app.
  • Put your PS3 disc into the drive. IsoTools should recognize the disc and say something like "PS3 Game Disc: BLUS-12345, Ready". (Note 1: When you insert your PS3 disc, don't be surprised if Windows doesn't recognize it under "My Computer". Note 2: You might have to eject and reinsert the disc before IsoTools will recognize it.)
  • Close IsoTools app.
  • Now open up the command line and cd (change directory) to the location of the dvdtoimg.exe that you downloaded earlier, and run a command: dvdtoimg f gamename.iso (where "f" is the drive letter). Eventually, percentage will reach "100%" and then "Process finished".
  • Eject the disc.
  • Reopen IsoTools app, insert the disc again, and choose "Rip". Now IsoTools will ask you where you want to save the files (an .ird and a .dec.iso). Once you click Save, IsoTools will start dumping. You can immediately "Cancel" the dump and close IsoTools.
  • Move the gamename.dec.iso file to the location of GetKeyFrom3k3y.exe
  • Now in the command line, cd (change directory) to the location of GetKeyFrom3k3y.exe, and run a comand: GetKeyFrom3k3y "gamename.dec.iso" >info.txt
  • Now you can delete the .ird and gamename.dec.iso files.

Dumping with a PC and a Non-PS3/OEM Blu-Ray Drive

PS3 discs via this method will not extract their IRD/Keys, but the iso's will still be datted in redump.

If you choose to dump with this method, use a compatible disc drive and this dumping guide.

Submit your Dump

Please review the important guidelines outlined in this forum thread regarding submission of both new discs and verifications: Redump Submissions

Note: MPF.Check (UI or CLI) now supports CFW PS3 dumps with getkey logs. This greatly speeds up gathering submission info.

The required information for a submission is:

  • Title of the game
  • Category (usually 'Game').
  • Media type: either BD-25 or BD-50
  • Serial on the disc and, if it's different, serial on the cover (spine)
  • Version of the game. This can be found by mounting the iso file and opening the PARAM.SFO file in the PS3_Game folder in a hex editor (for example http://www.hexed.it). Look for the VERSION and not the APP_VER.
  • Ringcode information (see below for more information)
  • Checksums for gamename.iso
  • Contents of info.txt if dumped with PC method or getkey.log if dumped on console
  • Barcode(s)
  • PVD

Furthermore, it's optional (but highly appreciated) to check which languages the game has. Some games either show a language selection screen at startup or in the game options. Many games will boot with different languages depending on the active language selected in the System Settings. Booting the game with each system language is necessary to identify the supported languages for these games.

Ring Information

The ring information can be found on the 'bottom' of the disc at printed/moulded on or near the inner plastic part of the disc.

Mastering code

For European discs, this is usually in the following format:

A0101XXXXXX-A511	X000

American discs have a code in the format:

BPSS-XXXXXXXX	XX

Asian discs have a code in the format:

[Serial]	X

Don't forget the tab!

Mastering SID

Mastering SID is printed on the disc (don't confuse it with the Mould SID which is pressed/moulded into the plastic). It is always in the format:

IFPI LXXX

Toolstamp

The toolstamp is a very small piece of text usually at the end of the Mastering Code. It's a few characters long. Note that the text is often mirrored, so make sure you don't copy the code backwards.

Mould SID

The Mould SID not printed on the back of the disc, but moulded/pressed in the plastic at the absolute center of the disc. The Mould SID is really small and can be read from the front/labelside (instead of the back) of the disc. It's always in the format:

IFPI XXXX

Retrieving PVD

Depending on the media and/or your version of IsoBuster (free version usually), you may not be able to view sectors and obtain the PVD with IsoBuster. The PVD is not absolutely required for your submission. Alternatively, you can locate it using a Hex Editor / Hex Viewer program such as Hex Workshop or HxD.

  • IsoBuster option
    • Open IsoBuster app.
    • File → Open Image File. Select the .iso you created to open it.
    • In the left hand side of the app, right click on "Session 1" → Sector View.
    • In the box at the top input "16".
    • Scoll down and highlight lines 0320 - 0370 → click on the notepad-looking icon (when your mouse hovers over it, it says "Copy").
    • Paste this info into your submission, it's the "PVD" info. Here's an example of how it should look:
0320 : 20 20 20 20 20 20 20 20  20 20 20 20 20 32 30 31                201
0330 : 30 30 35 31 32 31 32 31  39 33 35 30 30 00 30 30   0051212193500.00
0340 : 30 30 30 30 30 30 30 30  30 30 30 30 30 30 00 30   00000000000000.0
0350 : 30 30 30 30 30 30 30 30  30 30 30 30 30 30 30 00   000000000000000.
0360 : 30 30 30 30 30 30 30 30  30 30 30 30 30 30 30 30   0000000000000000
0370 : 00 01 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ................
  • Hex Editor option
    • Open up the .iso file with your hex editor of choice.
    • Locate the sections 00008320 through 00008370 and copy this information.
    • Past the info into your submission file.

Template

You can copy/paste the below template to submit a dump on the forum:

[b]Media:[/b]
[b]Category:[/b] Games
[b]Title[/b]: 
[b]Region:[/b] 
[b]Languages:[/b] 

[b]Serial:[/b] 

Ring:
[b]Mastering Code:[/b] 
[b]Mastering SID Code:[/b] 
[b]Toolstamp:[/b] 
[b]Mould SID Code:[/b] 

[b]Barcode:[/b]  

[b]Comments:[/b] 


[b]Version:[/b] 
[b]Edition:[/b] 

[b]PVD:[/b]

[b]Disc Key:[/b] 
[b]Disc ID:[/b] 
[b]PIC:[/b] 


[b]Size:[/b] 
[b]CRC-32:[/b] 
[b]MD5:[/b] 
[b]SHA1:[/b]
Personal tools